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Method for operating a supply unit for a driver circuit, 
and supply unit for a driver circuit 

The invention relates to a method for operating a supply 
5 unit for a driver circuit for a power stage, particularly 
for a power circuit for an electric motor. The invention 
also relates to a supply unit for a power supply in a 
driver circuit for a power stage. 

10 Electrical driver units generally comprise an electric 
motor and a power electronics circuit. The power 
electronics circuit draws power from a supply system at a 
fixed frequency and voltage and converts this power to 
produce a rotating field in a motor. The speed and torque 

15 of the motor are regulated by the power electronics 
circuit. The power electronics circuit generally 
comprises a servo amplifier or, in an unregulated drive 
system, a frequency converter. The servo amplifier and 
the frequency converter are normally together called an 

20 inverter and are actuated by means of the driver circuit 
provided in the power electronics circuit. 

When electric drive units are being used, it is necessary 
for them to be immediately turned off and safely stopped 
25 in the event of faults or risks. That is to say that the 
motor must under no circumstances move on account of 
electrical actuation. 

Normally, this is done by turning off the power supply 
30 for the power electronics circuit, as is known, by way of 
example, from the document BIA Report 5/2003 "Sichere 
Antriebssteuerung mit Frequenzumrichtern" [Safe drive 
control using frequency converters] , ISBN 3-88383-645-1 
or from the document Antriebstechnik 33 (1994) , No. 10, 
35 "Vermeidung von unerwartetem Anlauf bei 
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stromrichtergespeisten Antrieben" [Avoiding unexpected 
starting in inverter-powered drives] , Erwin Zinken, BIA 
St Augustin. This allows the motor to be reliably 
stopped, since no further power is supplied to the motor. 
5 However, when it is started again the entire power 
electronics circuit needs to be turned on again, which 
takes a considerable amount of time. 

A further option is to isolate the motor from the power 
10 electronics circuit using an electromechanical switch, 
e.g. a contactor. However, the sudden switching can 
easily damage the power electronics circuit on account of 
overvoltages . In addition, the loading is also very high 
for the contactor, since high current levels need to be 
15 switched. 

A further solution for safely turning off the rotating 
field is to suppress the ignition pulse. Ignition pulses 
are equivalent to control signals generated by the driver 

20 circuit in the power electronics circuit, which actuates 
the power stage in the power electronics circuit. The 
power stage has six electronic switches which are 
controlled by means of control signals, so that the 
internal DC voltage is converted into a three-phase 

25 alternating current. The ignition pulse can be suppressed 
in various ways. It is usual - as known from the 
aforementioned document BIA Report 5/2003 - to interrupt 
the supply voltage at the driver circuit. The voltage is 
usually turned off by a relay in the event of a fault. 

30 Safe stopping through ignition pulse suppression, i.e. by 
not producing the control signals, leaves all the other 
components in the power electronics circuits in a full 
standby state. For the ongoing application, it is thus 
possible to put the electrical drive system into the safe 

35 state and to activate it again without this being 
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noticed. Delays when the driver circuit is turned on 
again do not arise in essence. 



The switching of the supply voltage at the driver circuit 
5 has to date been effected by a mechanical relay, which is 
subject to wear. Such a mechanical switching relay does 
not allow the power electronics circuit to be designed 
for "single- fault safety" . "Single- fault safety" means 
that if a fault occurs in one of the safety-related 
10 components used the actuation of the motor is stopped 
immediately. 

It is therefore an object of the present invention to 
provide a method for operating a power stage in a power 

15 electronics circuit for an electric motor which is 
designed for "single-fault safety" in particular. It is 
also an object of the present invention to provide a 
supply unit for a driver circuit, particularly for 
actuating a motor, which is designed for "single- fault 

20 safety" . 

This object is achieved by the method in accordance with 
claim 1 and by the supply unit in accordance with claim 
11. 

25 

Further advantageous refinements of the invention are 
specified in the dependent claims. 

A first aspect of the present invention provides a method 
30 for operating a supply unit for a driver circuit, 
particularly in a power electronics circuit for an 
electric motor. A control current is switched by an 
inductive converter using a first and a second switch on 
the basis of a first control signal and a second control 
35 signal in order to generate a power supply for the driver 
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circuit. Turning off the first and second switches allows 
a free-wheeling current to flow through a first or a 
second free-wheeling current path. Actuating the power 
stage involves first of all turning on the first and 
5 second switches on the basis of the first and second 
control signals and then, e.g. on the basis of an 
actuation value, turning off the first switch in a turn- 
off operation using the first control signal. The turn- 
off operation prompts measurement of the free-wheeling 
10 current through the first free-wheeling current path. The 
second switch is then switched, or not, using the second 
control signal on the basis of the measured first free- 
wheeling current. 

15 The inventive method has the advantage that in a supply- 
unit a switching operation taking place in a normal mode 
involves the operation of the first switch being checked 
by using the measured free-wheeling current to identify 
whether the first switch has actually interrupted the 

20 current path on the basis of the first control signal and 
is thus operating correctly. Since generating the power 
supply requires both switches to be turned on and off 
constantly, essentially at the same time, the generation 
of the power supply can be interrupted immediately by 

25 preventing one of the switches from switching. 

In line with a first alternative, the second switch is 
prevented from being turned off if measurement of the 
free-wheeling current through the first free-wheeling 

30 path detects a fault. Since, when a fault is identified 
in this manner, the turn-off operation for the first 
switch has not actually turned said switch off, the 
circuit thus remains closed via the inductive converter. 
As a result of the switching of the second switch being 

35 prevented, however, no further switching operation takes 
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place, which means that no power can be transmitted by 
the inductive converter. 



In line with a further alternative, the first and second 
5 switches can be prevented from being turned on again if 
measurement of the free-wheeling current through the 
first free-wheeling current path detects a fault. In this 
case, the second switch is turned off after the fault is 
identified. This has the advantage over the first 
10 alternative that a continuous direct current cannot flow 
through the inductive converter, which current can 
sometimes result in destruction thereof. 

Provision can be made for a further switching operation 
15 to involve first of all turning on the first and second 
switches again on the basis of the first and second 
control signals and then turning off the second switch in 
a further turn-off operation using the second control 
signal. As a result, the free-wheeling current through 

2 0 the second free-wheeling current path is measured and the 

first switch is switched using the first control signal 
on the basis of the measured free-wheeling current 
through the second free-wheeling current path. This also 
allows the operation of the second switch to be checked. 

25 

In particular, one of the two switches can be checked 
alternately in each switching cycle to determine whether 
it is operating correctly, i.e. to determine whether it 
is being turned off correctly. If one of the two switches 

3 0 does not interrupt the respective current path correctly, 

the subsequent check on the switching behavior prevents 
further switching of the respective other switch, which 
means that no further voltage or current change takes 
place on the inductive converter in order to stop further 
35 power transmission and hence the power supply 
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immediately. Actuation of the power stage in the power 
electronics circuit is stopped such that no power is 
provided for generating a rotating field for a downstream 
electric motor which needs to be stopped. 

5 

If measurement of the free-wheeling current through the 
second free-wheeling current path detects a fault, the 
first and second switches can firstly be prevented from 
being turned on again and/or the first switch can be 
10 prevented from being turned off, in a similar manner to 
the procedure when checking the first free-wheeling 
current path. 

Provision may be made for the first and/or the second 
15 control signal to be generated using a periodic signal. 
The periodic signal can be blocked for generating the 
first and/or the second control signal if measurement of 
the free-wheeling current through the first and/or the 
second free-wheeling current path detects a fault. 
20 Blocking the periodic signal required for generating the 
control signals is one way of immediately stopping the 
switching operations for the first and second switches. 

A further aspect of the present invention provides a 
25 supply unit for a driver circuit for a power stage, 
particularly in a power electronics circuit for an 
electric motor. The driver circuit has an inductive 
converter which is connected in series with a first and a 
second switch in order to provide a power supply by 
30 switching the switches. The first and second switches can 
be actuated by a first and a second signal, respectively. 
The power supply can be produced in the inductive 
converter by turning on and off the first and second 
switches. The first switch has a first free-wheeling 
35 current path connected to it in order to accept a free- 
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wheeling current in a turn-off operation for the first 
switch. The second switch is connected to a second free- 
wheeling current path in order to accept a free-wheeling 
current in a turn-off operation for the second switch. 
5 The driver circuit has a control device in order, in a 
turn-on operation, to turn on the first and second 
switches on the basis of the first and second control 
signals and in order, in a turn-off operation, first of 
all to turn off the first switch and to measure a free- 
10 wheeling current through the first free-wheeling current 
path, and in order to switch the second switch on the 
basis of the measured free-wheeling current path. 

The supply unit based on the invention is used for 

15 operating a driver circuit for a power stage with a power 
supply which is produced by turning on and off a supply 
voltage on an inductive converter. The turning-on and 
turning-off are effected using two switches which need to 
be switched essentially at the same time. The control 

20 device first of all turns on the two switches at the same 
time and then, e.g. on the basis of an actuation value, 
turns off the first switch. If the first switch is faulty 
and does not interrupt the current path through the 
inductive converter, this is detected by the measurement 

25 of the free-wheeling current through the first free- 
wheeling current path, and the second switch is prevented 
from being switched again. If it is detected that the 
first circuit is switched correctly, the second switch is 
likewise turned off, so that the period of time between 

3 0 turning off the first switch and turning off the second 
switch is as short as possible. 

The first free-wheeling current path can have a first 
current sensor and/or a first free-wheeling diode. The 
35 second free-wheeling current path can have a second 
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current sensor and/or a second free-wheeling diode. 

The control device can be designed so that, in a further 
turn-off operation, it first of all turns off the second 
5 switch and measures a free-wheeling current through the 
second free-wheeling current path in order to switch the 
first switch on the basis of the measured free-wheeling 
current. The effect which can be achieved by this is that 
first the first and then the second switch are 
10 alternately turned off first in each turn-on/turn-off 
operation so as thus to check the operation of the first 
and second switches in succession. 

In line with a further embodiment, the supply unit 
15 comprises a first control circuit and a second control 
circuit, which is separate from the latter, with the 
first control circuit controlling the switching of the 
first switch and measuring the current through the first 
free-wheeling current path. The second control circuit 
20 accordingly controls the switching of the second switch 
and measures the current through the second free-wheeling 
current path. The first control circuit and the second 
control circuit are coupled to one another such that the 
first control circuit generates the first control signal 
25 on the basis of a second Active signal which is applied 
by the second control circuit, and the second control 
circuit conversely generates the second control signal on 
the basis of an Active signal which is applied by the 
first control circuit. 

30 

This makes it possible to achieve single- fault safety, 
which interrupts the generation of control signals and 
hence the provision of the power supply as soon as a 
fault occurs in one of the switches, in one of the free- 
35 wheeling paths or in one of the control circuits. As soon 
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as the control circuit identifies the fault in the 
respective associated switch, it checks the operability 
of the switch. By virtue of the control circuit 
generating the Active signal which is required by the 
5 respective other control circuit in order to actuate the 
associated switch, provision of the power supply is 
interrupted even if one of the control circuits fails. 
This means that the driver circuit based on the invention 
has "single-fault safety", since provision of the power 
10 supply is interrupted immediately when a fault occurs in 
one of the components . 

So that the first and second Active signals cannot be 
generated incorrectly, said signals are provided as a 

15 periodic signal or as a signal sequence from the 
respective control circuit, so that in the event of a 
fault the periodic Active signal continues to be 
produced. The periodic signal or the signal sequence has 
the advantage that in the event of a fault in the 

20 respective control circuit which would result in a 
permanent state of the Active signal this state does not 
result in the respective control signal continuing to be 
generated in the duplicate other control circuit. 

25 Preferably, the inductive converter is in the form of a 
transformer. 

In line with one embodiment of the invention, the control 
device is designed to generate the first and/or the 
3 0 second control signal using a provided clock signal. If a 
fault occurs, the clock signal can be interrupted, which 
means that generation of the first and second control 
signals is interrupted. 

35 Preferred embodiments of the invention are explained in 
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more detail below with reference to the appended 

drawings, in which: 



Figure 1 shows a block diagram to illustrate a drive 
5 system; 

Figure 2 shows a block diagram of the inventive driver 
circuit; and 

10 Figure 3 shows a signal flowchart to illustrate the 
actuation of the switches in the driver 
circuit , 



Figure 1 shows a block diagram of the actuation of an 
15 electric motor in a drive system. A control system 1 
generates actuation values, with an electric motor 2 
being intended to be actuated on the basis of the 
actuation values. The electric motor 2 is usually 
actuated using a power electronics circuit 3 which 
20 comprises a power stage 4. In the example shown, the 
power stage 4 generates three phase currents and for this 
purpose typically has 6 electronic switches (not shown) 
which are actuated by means of respective switching 
signals from a driver circuit 5 . The electric motor 2 is 
25 preferably in the form of a synchronous or asynchronous 
motor, particularly in the form of an electric motor 
which can be operated using an electrical rotating field 
and has no separate commutation. 

3 0 The power stage 4 is used to provide the rotating field 
at the necessary current level for operating the electric 
motor 2 . The switching signals which are used to actuate 
the power stage 4 are provided by the driver circuit 5. 



35 In some fields of application, it is necessary for the 
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electric motor 3 to be stopped immediately when a fault 
occurs so that the electric motor 2 does not continue to 
run uncontrolled. This is done by virtue of the driver 
circuit 5 in the power electronics circuit 3 immediately 
5 interrupting the generation of the respective switching 
signal as soon as a fault has been identified. To 
generate the rotating field for the electric motor 2, a 
particular sequence of switching signals is required. If 
the driver circuit stops these switching signals, it is 
10 not possible to produce the rotating field. This allows 
the electric motor 2 to be stopped. 

Generation of the switching signals in the driver circuit 
5 is interrupted, in particular, by interrupting the 
15 power supply to the driver circuit 5 . The power supply is 
provided by a supply unit 6 which is connected to the 
driver circuit 5. 

Figure 2 shows a circuit diagram of an inventive supply 
20 unit 6 for a driver circuit 5. The power supply in the 
form of a supply voltage is provided for the driver 
circuit 5, which generates switching signals which are 
forwarded to the electronic switches in the power stage 
4 . 

25 

The switching signals are DC isolated and are in a 
voltage range which is appropriate for an electronic 
switch in a downstream power stage. Typically, the gate 
input of a power field effect transistor is inbuilt in 
30 the power stage. The switching signal is essentially a 
pulse-width-modulated signal which transmits on and off 
states to the power stage. 

The power stage (not shown) then turns on or off a coil 
35 winding in the electric motor on the basis of the 
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switching signal. 

The supply unit 6 which is shown in figure 2 generates a 
supply voltage as a power supply, said supply voltage 
5 being produced in a secondary coil 12 on the basis of a 
signal being switched on a primary coil 10 in a 
transformer 11. Since turning on and off the flow of 
current through the primary coil produces positive and 
negative voltages in the secondary coil 12, this 
10 resultant voltage signal is rectified by means of a 
rectifier diode 13 and is preferably smoothed by a 
capacitor (not shown) , so that essentially a positive 
voltage is applied to the driver circuit 5 . 

15 The primary coil 10 is connected in series with a first 
switch 14 and a second switch 15 between a high supply 
voltage potential VDD and a low supply voltage potential, 
preferably a ground potential GND. The first and/or the 
second switch 14, 15 are preferably in the form of field 

20 effect transistors, these each being able to be actuated 
by means of a control signal via an appropriate gate 
connection. To switch the transformer 11, the first and 
second switches 14, 15 are usually turned on and off at 
the same time, so that the switching operations in the 

25 primary coil 10 induce the corresponding voltage signal 
in the secondary coil 12 of the transformer 11. 

Particularly in the turn-off operation, the inductance of 
the primary coil 10 produces a free-wheeling current 

3 0 which is in the opposite direction to the flow of current 
when the primary coil 10 is in the turned-on state. So 
that this current does not result in harmful overvoltages 
on the field effect transistors and other components of 
the driver circuit, each of the switches 14, 15 is 

35 provided with a free-wheeling current path 16, 17. 
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The first switch 14 is arranged between the high supply 
potential VDD and a first connection of the primary coil 
10. The first connection of the primary coil 10 is 
5 connected via the first free-wheeling current path 16 to 
the ground potential, so that a free-wheeling current 
when the first switch is turned off can drain to the 
ground potential GND. The second switch 15 is arranged 
between a second connection of the primary coil 10 and 
10 the ground potential GND. The second connection of the 
primary coil 10 is likewise connected via a second free- 
wheeling current path 17 to the high supply voltage 
potential VDD. 

15 So that turning on the switches does not produce a short 
between the high supply potential VDD and the ground 
potential GND, the first free-wheeling current path 16 
contains a first free-wheeling diode 18 and the second 
free-wheeling current path 17 contains a second free- 

20 wheeling diode 19 such that a voltage which is negative 
with respect to the ground potential and which is applied 
to the first connection of the primary coil 10 is drained 
via the first free-wheeling current path 16, and a 
voltage which is higher than the high supply potential 

25 VDD and which is applied to the second connection of the 
primary coil 10 is drained via the second free-wheeling 
current path 17, since the respective free-wheeling diode 
18, 19 becomes conductive in this direction. 

30 The first free-wheeling current path 16 has a first 
current sensor 20, and the second free-wheeling current 
path 17 has a second current sensor 21, in order to 
measure the respective free-wheeling currents through the 
free-wheeling current paths 16, 17. The current sensors 

35 20, 21 may be designed, by way of example, using a 
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measuring resistor, e.g. a shunt, or may have a magnetic 
field current sensor in which the resistor in the 
respective free-wheeling current path is not affected by 
a measuring resistor. To measure a free-wheeling current, 
5 it is also possible to detect the free-wheeling current 
by measuring the current through the corresponding 
switch. 

A first control circuit 22 and a second control circuit 
10 23 are provided for generating the control signals for 
the switches 14, 15. The first control circuit 22 is 
connected to the first current sensor 20, so that a 
measured free-wheeling current in the first free-wheeling 
current path 16 is provided in the first control circuit 
15 22 . The first control circuit 22 is connected to a first 
control connection of the first switch 14, particularly 
to the gate connection of the field effect transistor. 
The second control circuit 22 is connected to the second 
current sensor 23, so that the measured free-wheeling 
20 current in the second free-wheeling current path 17 is 
available in the second control circuit. The second 
control circuit 23 is connected to a control input of the 
second switch 15, i.e. to the gate connection of the 
second field effect transistor. 

25 

The first control circuit 22 is connected to the second 
control circuit 23 via a first Active signal line 24 in 
order to transmit an Active signal to the second control 
circuit 23. A second Active signal line 25 is provided, 

3 0 so that the second control circuit 23 can transmit a 
second Active signal to the first control circuit 22 . The 
control circuits 22, 23 receive, via a signal line 26, an 
externally prescribed enable signal which permits or 
prevents actuation of the electric motor 2 , In addition, 

35 each of the control circuits 22, 23 has an input for a 
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clock signal CLK. The control circuits are synchronized 
to this clock. 

The text below describes the mode of operation of the 
5 first control circuit 22 with regard to the first switch 
14 and the first free-wheeling current path 16, the 
second control circuit 23 operating in essentially- 
similar fashion with regard to the second switch and the 
second free-wheeling current path 17. 

10 

The first and second control circuits 22, 23 receive the 
enable value via the data line 26 and, at the start of 
the period duration, generate a respective turn-on signal 
as a first or second control signal, which is supplied to 

15 the first switch 14 or the second switch 15, 
respectively, e.g. a high level. The respective turn-on 
signal turns on the switches 14 and 15, so that the high 
supply potential VDD is connected to the first connection 
of the primary coil 10 and the low supply potential GND 

20 is connected to the second connection of the primary coil 
10. When a turned-on period has elapsed, the first 
control signal is switched such that the first switch 15 
is turned off, e.g. by changing to a low level. The turn- 
off operation produces a free-wheeling voltage on the 

25 primary coil 10 of the transformer 11, said voltage being 
reduced via the first free-wheeling current path 16. 

The free-wheeling current in the first free-wheeling 
current path 16 is measured using the first current 

3 0 sensor 20, and the measured value is made available to 
the first control device 22 . The latter compares the 
measured current value with a threshold current value 
which is chosen such that it is possible to detect that a 
significant free-wheeling current is flowing. This allows 

35 the switching behavior of the first switch 14 to be 
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checked. This is because if the first switch 14 is not 
interrupted on the basis of the control signal, the 
current path through the primary coil 10 is not 
interrupted and a free-wheeling voltage which would need 
5 to be reduced via the first free-wheeling current path 16 
does not arise. This is detected as a fault in the first 
control circuit 22, and further generation of a control 
signal to turn on the switch 14 is stopped. 

10 If a free-wheeling current in the first free-wheeling 
current path is measured which exceeds the threshold 
current value, the first control circuit 22 generates an 
Active signal on the first Active signal line 24, as a 
result of which the Active signal is transmitted to the 

15 second control circuit 23. When the corresponding Active 
signal is received, the second control circuit 23 
immediately turns off the second switch 15, so that for 
the entire period duration of the control signals only a 
short time delay arises between turning off the first 

2 0 switch and turning off the second switch, and this time 
delay has no significant effects on the generation of the 
switching signal. 

The first and second control circuits 22, 23 operate 
25 essentially in sync, which means that it is advantageous 
if the same clock signal CLK is applied to both control 
circuits 22, 23. The two control circuits 22, 23 are 
tuned to one another such that during a clock cycle only 
one of the two control circuits ever generates the 
30 control signal for turning off the respective switch 14, 
15 independently without receiving the Active signal 
beforehand. Preferably, the two control circuits operate 
out of sync with regard to the turn-off signal, and 
particularly in a first clock cycle the first control 
35 circuit generates the first control signal for turning 
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off the first switch 14 independently and the second 
control circuit 23 makes the control signal for turning 
off the second switch 15 dependent on the first switch 14 
having been turned off. In a second clock cycle, the 
5 second control circuit 23 then generates the control 
signal for turning off the second switch 15 independently 
of the Active signal, and the first control circuit 22 on 
the basis of the Active signal generated by the second 
control circuit 23 when the second switch 15 is 
10 successfully turned off. 

The respective Active signal indicates to the respective 
control circuit 22, 23 that the control signal for 
turning off the respective switch 14, 15 now needs to be 

15 generated. That the respective switch has been turned off 
is preferably indicated by a suitable edge of the Active 
signal, since this edge needs to be generated actively by 
the respective control circuit. It is also possible for 
faults which occur in one of the control circuits to 

20 result in immediate interruption of the generation of the 
switching signal, since the Active signal can be produced 
only by a correctly operating control circuit 22, 23. 
This provides the presented supply unit 6 with "single- 
fault safety", i.e. when a fault occurs in one of the 

25 components used the generation of the switching signal is 
immediately interrupted, so that the rotating field is no 
longer produced to actuate the electric motor 2 . 

The proposed supply unit is thus in a form such that 
30 faults when one of the switches 14, 15 is turned off 
immediately result in an appropriate switching signal no 
longer being generated. Since the relevant control 
circuit 22, 23 may also have faults and then might no 
longer identify a relevant fault when the respective 
35 switch is switched, the control circuit must actively 
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generate an Active signal when the switch connected to it 
is detected to have been turned off. This signal would 
not be generated in a faulty control circuit, which means 
that the respective other control circuit does not 
5 generate a turn-off signal. In the subsequent clock cycle 
too, no control signals would be generated which result 
in one of the switches 14, 15 being switched. Hence, by 
way of example, a fault in the first switch 14 which 
involves the first switch 14 no longer switching from its 

10 turned-on state to its turned-off state results in the 
second switch 15 no longer being turned off either, since 
the Active signal required by the second control device 
23 would no longer be generated by the first control 
circuit 22. The current path through the primary coil 10 

15 is thus maintained. Since there is no longer a change of 
current in the primary coil 10, no power is transmitted 
to the secondary coil 12 either, which means that the 
supply voltage is turned off, 

20 Alternatively, provision may also be made for the 
occurrence of a fault which is identified by one of the 
control circuits and is indicated to the others by the 
absence of the correct Active signal to result in the 
control circuit generating a control signal to turn off 

25 the switch which is connected to it, in order to 
interrupt the current path through the primary coil 10 in 
every case, since otherwise a very high direct current 
would flow through the primary coil 10 which might 
destroy it. However, this results in a further switching 

3 0 operation in which power briefly continues to be 
transmitted to the secondary coil 12 and thus produces a 
further edge in the switching signal, so that the turn- 
off operation for the rotating field for actuating the 
electric motor 2 would continue to be produced. Depending 

35 on the application in which the electric motor 2 is being 



- 19 - BIE 3035-PC/US 

operated, this is a negligibly short period in the range 
of a few jisec, however. 

Similarly, faults in one of the free-wheeling diodes 18, 
5 19 can be identified. If one of the free-wheeling diodes 
18, 19 starts to conduct in the reverse direction, there 
is a short between the high supply potential VDD and the 
ground potential GND, and the safe state is reached. The 
circuit would then not operate. If the diode in question 

10 starts not to conduct in the forward direction, however, 
this failure does not prevent operation but is relevant 
to safety if a transistor with a short fails. The fault 
that the respective free-wheeling diode 18, 19 starts not 
to conduct in the forward direction results in the 

15 current sensor 20, 21 measuring no free-wheeling current, 
which means that the respective control circuit does not 
generate an Active signal, since it cannot detect that 
the respective switch 14, 15 has turned off. Hence, a 
faulty diode results either in a short being produced in 

20 the circuit which stops the electric motor or in the 
generation of the control signal in question being 
prevented, A significant advantage of such a supply unit 
is that diagnostic intervals are just one cycle of the 
clock signal CLK, which means that they can be carried 

25 out at short intervals of time of 50 psec, for example. 

In addition, a superordinate control system (not shown) 
is connected to the control units 22 and 23. If one were 
no longer to operate correctly, the control system blocks 
30 the enable signal, so that the control units 22, 23 
generate no more control signals. 

Figure 3 shows a signal diagram to illustrate the 
profiles of the clock signal and the first and second 
35 control signals. It can be seen that the first and second 
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control circuits 22, 23 indicate that the respective 
switch has been turned on upon the rising edge of the 
clock signal by means of a likewise rising edge of the 
control signal. For a particular period, the two control 
5 signals remain at the high levels. It can be seen that 
the first control signal STl turns off the first switch 
14 with a rising edge. A suitable Active signal is then 
generated in the control circuit 22 if the switching 
operation was successful and no other fault has occurred. 

10 This signal is transmitted to the second control circuit 
23, which generates the falling edge for the second 
control signal ST2 in order to turn off the second 
switch. Up to the next rising edge of the clock signal 
CLK, the control signals remain at a low level. Upon the 

15 next rising edge of the clock signal CLK, the two control 
signals STl, ST2 change to a high level, with the second 
control circuit now generating a falling edge of the 
second control signal ST2 . The falling edge of the second 
control signal ST2 turns off the second switch 15, with 

20 an Active signal being generated if the second switch 15 
has been turned off and no further fault has occurred. 
The Active signal then likewise turns off the first 
switch 14, with a negligible time delay, in line with a 
falling edge of the first control signal STl. It is thus 

25 possible for the operation of the switches 14, 15 or of 
the components in the respective free-wheeling current 
path to be checked alternately, with generation of the 
control signals being stopped immediately if a fault is 
identified. 



